The file "math.exe" is known to be created under the following filenames:

%CommonPrograms%\startup\explorer.exe

%ProgramFiles%\mathhomeworkmaker\math.exe

%System%\bifrost\math.exe

c:\ab.exe

c:\ab\bas.exe

c:\al.exe

c:\al\li.exe

c:\babylon.exe

c:\babylon\picture.exe

c:\barname.exe

c:\barname\download.exe

c:\bas.exe

c:\bas\zad.exe

c:\computer.exe

c:\computer\cpu.exe

c:\computers.exe

c:\computers\motherboard.exe

c:\country.exe

c:\country\al.exe

c:\cpu.exe

c:\cpu\jeneral.exe

c:\deh.exe

c:\deh\downloads.exe

c:\delphi.exe

c:\delphi\country.exe

c:\download.exe

c:\downloads.exe

c:\film.exe

c:\film\good.exe

c:\films.exe

c:\films\otvali.exe

c:\good.exe

c:\good\project.exe

c:\home.exe

c:\home\si.exe

c:\iran.exe

c:\iran\room.exe

c:\italy.exe

c:\italy\home.exe

c:\jeneral.exe

c:\jeneral\iran.exe

c:\ka.exe

c:\ka\na.exe

c:\li.exe

c:\li\ab.exe

c:\math.exe

c:\math\films.exe

c:\maths.exe

c:\maths\mi.exe

c:\mi.exe

c:\mi\ze.exe

c:\motherboard.exe

c:\motherboard\sony.exe

c:\na.exe

c:\na\resh.exe

c:\ok.exe

c:\otvali.exe

c:\otvali\computer.exe

c:\picture.exe

c:\picture\barname.exe

c:\project.exe

c:\project\babylon.exe

c:\recycler\ok.exe

c:\room.exe

c:\room\university.exe

c:\si.exe

c:\si\ka.exe

c:\sony.exe

c:\sony\italy.exe

c:\university.exe

c:\university\delphi.exe

c:\word.exe

c:\word\math.exe

c:\words.exe

c:\words\maths.exe

c:\zad.exe

c:\zad\deh.exe

c:\ze.exe

c:\ze\computers.exe

Notes:

%CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).

%ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

The file "math.exe" has the following possible country of origin:

Origin

Number of Incidents

Iran

3

The following threats are known to be associated with the file "math.exe":